New server: pdc and group policy control transfer?

[woody]

I have my shiney new dell server which I want to take on the role of the main domain controller and to take authority over group policy settings on the domain.

I have promoted the new server to become a domain controller, but what do I do to get it to take the reigns from the current main server?

I also downloaded and installed Group Policy Management console but this wanted me to change the domain controller to a different one - presumably the current server from which I edit group policies.

I'm sure it's straight forward, but thought I'd post here for a quick answer before I start trawling through Mr Gate's website.

[Geoff]

Do you mean you want to transfer the FSMO roles?

[woody]

I have figured that out now. Is group policy one of those FSMO roles? If so, how do I transfer it?

[djm968]

I think thats what he means Geoff.

This link should help.

http://support.microsoft.com/kb/324801

[petectid]

As Geoff mentions you need to transfer the FSMO roles to your new server, also make sure its a Global Catalogue server. How to transfer FSMO roles here

[Geoff]

I have figured that out now. Is group policy one of those FSMO roles? If so, how do I transfer it?

No, have a read of this KB article.

http://support.microsoft.com/kb/324801

[djm968]

I may be missing something but I must say that I am a little concerned that you are unable to edit GPO from the new DC. Have you configured DNS correctly?

[Geoff]

I may be missing something but I must say that I am a little concerned that you are unable to edit GPO from the new DC. Have you configured DNS correctly?

It's probably not finished replicating.

[djm968]

There we go.... I was missing something!

[woody]

I may be missing something but I must say that I am a little concerned that you are unable to edit GPO from the new DC. Have you configured DNS correctly?

No, I can edit GP from the new server, if I point the GP management console to the current server. But I want the new server to CONTROL GP, not just edit it. When I transfer FSMO roles, will this include GP controll as well?

[petectid]

GP should work on both servers. Do you intend on keeping two Domain controllers? If so you can share the FSMO roles between them but there are a few rules you are best using. If your going to demote the old server then move all the FSMO roles and the Global Catalogue to the new DC. You will also need DNS on the new server if you have not installed it already. Do not demote your old server until everything works as it should or you will break the domain.

[woody]

GP should work on both servers. Do you intend on keeping two Domain controllers? If so you can share the FSMO roles between them but there are a few rules you are best using. If your going to demote the old server then move all the FSMO roles and the Global Catalogue to the new DC. You will also need DNS on the new server if you have not installed it already. Do not demote your old server until everything works as it should or you will break the domain.

Thanks for that. I do intend to leave the old server as a domain controller but it is getting on now so I don't want it to do too much of the work. Which FSMO roles if any would it be worth leaving on the old server?

Also how do I transfer the global catalogue? Can't seem to find anything about this on microsoft support.

[djm968]

[quote="woody"]

Also how do I transfer the global catalogue? Can't seem to find anything about this on microsoft support.

Active Directory Sites and Services

http://support.microsoft.com/kb/313994

[woody]

Forget the last post. It is spelled CATALOG on the microsoft website!

[Geoff]

Silly Americans